Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e1e46c-8b05-46ff-a2a3-4738c422b90d/1/Os59L56kfIwVPBL9fzu1-2XF1dk.mft
File:                     Os59L56kfIwVPBL9fzu1-2XF1dk.mft (raw, json)
Hash identifier:          o4ka66ZrRehkDoU+QihKsjeUfGHCFfh2hLPuCfLyE8s=
Subject key identifier:   14:FC:D5:FE:4D:FB:11:B8:41:19:16:95:C9:C4:EA:10:D5:5D:58:6A
Authority key identifier: 3A:CE:7D:2F:9E:A4:7C:8C:15:3C:12:FD:7F:3B:B5:FB:65:C5:D5:D9
Certificate issuer:       /CN=3ace7d2f9ea47c8c153c12fd7f3bb5fb65c5d5d9
Certificate serial:       018BEC2D370567CCEE99EE247A0850DA681D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Os59L56kfIwVPBL9fzu1-2XF1dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e1e46c-8b05-46ff-a2a3-4738c422b90d/1/Os59L56kfIwVPBL9fzu1-2XF1dk.mft
Manifest number:          059D
Signing time:             Mon 20 Nov 2023 10:01:07 +0000
Manifest this update:     Mon 20 Nov 2023 10:01:07 +0000
Manifest next update:     Tue 21 Nov 2023 10:01:07 +0000
Files and hashes:         1: Os59L56kfIwVPBL9fzu1-2XF1dk.crl (hash: gAw6Y2ttbEgjTGELK7uyFkT65TrCYodZsbPQB5eNkPE=)
                          2: Pa4IxZuhOpYNIYctjZW13aDzTyc.roa (hash: wJNcuvoMB8J0JBEKHUfAMum6e1Gk2E40KWEu51Ha36g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ec:2d:37:05:67:cc:ee:99:ee:24:7a:08:50:da:68:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ace7d2f9ea47c8c153c12fd7f3bb5fb65c5d5d9
        Validity
            Not Before: Nov 20 10:01:07 2023 GMT
            Not After : Nov 21 10:01:07 2023 GMT
        Subject: CN=14fcd5fe4dfb11b841191695c9c4ea10d55d586a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:97:dc:92:2c:4c:d1:87:09:97:6e:b7:56:
                    5a:c7:fe:d4:21:55:26:40:8f:e2:6f:13:34:70:3a:
                    eb:10:e3:59:66:4c:03:08:6c:4f:26:b0:22:6a:8f:
                    c8:8f:db:a0:28:6f:ae:1d:14:3d:8e:71:cf:ba:79:
                    06:77:e8:ad:82:72:98:61:c4:30:44:49:cb:6a:bf:
                    ed:cb:6f:21:8c:8b:5e:31:9a:dd:de:70:08:df:38:
                    bd:d9:68:dc:32:5f:7c:25:99:41:bf:48:0a:6e:01:
                    8a:75:97:e0:3b:2e:d1:b2:7f:76:25:28:30:e1:e8:
                    d3:33:4c:08:6b:55:4c:73:03:49:52:1a:c1:2f:68:
                    07:27:6b:93:15:f8:f0:95:49:87:91:d6:31:2e:29:
                    9e:c6:2d:cc:29:cd:b4:29:51:b2:39:81:5b:bd:8d:
                    7e:00:d5:4d:2f:65:f4:ee:a5:d2:2f:86:1f:78:0e:
                    dd:77:c9:cc:9a:a8:46:b7:36:7d:d6:8a:49:5d:50:
                    f7:30:2a:94:df:e1:88:da:80:a4:e9:ef:44:1a:d9:
                    72:43:8a:c6:b3:3e:aa:fc:92:22:a5:94:4f:5d:fd:
                    8f:fc:00:17:79:09:b1:ec:f7:9a:96:df:d7:7b:7b:
                    23:44:b8:8d:a7:97:90:73:10:37:09:19:c9:f9:e0:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FC:D5:FE:4D:FB:11:B8:41:19:16:95:C9:C4:EA:10:D5:5D:58:6A
            X509v3 Authority Key Identifier:
                keyid:3A:CE:7D:2F:9E:A4:7C:8C:15:3C:12:FD:7F:3B:B5:FB:65:C5:D5:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os59L56kfIwVPBL9fzu1-2XF1dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e1e46c-8b05-46ff-a2a3-4738c422b90d/1/Os59L56kfIwVPBL9fzu1-2XF1dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e1e46c-8b05-46ff-a2a3-4738c422b90d/1/Os59L56kfIwVPBL9fzu1-2XF1dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b7:4f:77:da:da:45:b9:0f:43:e6:8d:bb:17:ba:8c:81:c6:
         b6:34:ed:8e:96:ae:26:c1:7c:41:e3:5a:de:3c:d2:81:3b:ae:
         cc:1b:c5:5d:3c:e0:94:9e:19:66:eb:ef:66:0e:71:2c:c0:f0:
         99:86:49:ef:f0:62:48:17:43:c7:8b:52:71:52:78:f3:c6:73:
         e7:f6:3e:d7:81:dc:b7:53:85:8c:e4:cb:99:51:b7:27:e1:d8:
         b4:66:99:82:ed:e5:dc:e8:fb:71:d4:e7:9a:9c:6e:16:35:0a:
         67:03:53:92:38:5a:4d:51:27:01:aa:50:8a:0f:f1:53:39:b9:
         26:fa:67:13:c2:3c:ce:72:6b:c6:b4:3c:41:d6:10:54:ee:e4:
         57:a4:dc:77:80:47:a4:4e:c7:12:28:4d:58:12:66:00:ad:2b:
         72:0f:68:9e:82:50:66:52:e6:21:36:84:4c:4b:b8:da:63:8e:
         ce:44:ce:ee:8c:8b:86:33:73:c7:29:57:5c:b8:17:69:c8:ac:
         eb:b8:24:50:e2:64:52:6e:5e:41:50:cf:2c:b4:6c:e0:02:96:
         52:76:c1:ac:65:65:ea:b7:c8:86:2c:31:01:61:d1:d2:75:58:
         f5:b7:e2:dd:4e:46:95:fc:ef:c5:f4:24:43:60:e3:df:10:b7:
         8f:ce:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----